S5. User Security Profiles


XDOC manages document-level security and system permissions through Security Profiles. Each user is assigned a Security Profile for every Project to which they have access. The Security Profile defines the permissions, restrictions, document filters, and advanced dynamic security policies that are evaluated whenever a user performs actions within XDOC.

In many mortgage processing environments, the Loan Origination System (LOS) serves as the system of record for user authentication, including username and password validation, and controls access to XDOC. LOS platforms also commonly utilize User Roles (such as Underwriter, Loan Officer, Processor, Broker, and Closer), which may vary from one loan to another based on the user's involvement in the loan lifecycle.

XDOC provides mechanisms that allow the LOS to pass a user's role information to XDOC both during the initial authentication process (to establish a default role) and during loan retrieval operations through the Container Provider interface. When XDOC receives a role value that matches the name of an existing Security Profile, it automatically applies the permissions and security policies defined within that profile for the duration of the user's session or transaction.

This role-based integration enables organizations to leverage existing LOS security models while maintaining consistent document access controls, workflow restrictions, and dynamic security policies within XDOC. By aligning LOS User Roles with XDOC Security Profiles, administrators can centrally manage security requirements and ensure users are granted the appropriate level of access based on their responsibilities for each loan.